Opened 9 years ago
Closed 9 years ago
#9904 closed defect (fixed)
libXfont 1.5.3
| Reported by: | Owned by: | ||
|---|---|---|---|
| Priority: | high | Milestone: | 8.2 |
| Component: | BOOK | Version: | SVN |
| Severity: | medium | Keywords: | |
| Cc: |
Description
Matt Turner (1):
libXfont 1.5.3
Michal Srb (2):
Check for end of string in PatternMatch (CVE-2017-13720) pcfGetProperties: Check string boundaries (CVE-2017-13722)
This only affect people using legacy fonts (that includes anyone using xorg-server-1.18 or earlier).
Change History (2)
comment:1 by , 9 years ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:2 by , 9 years ago
| Resolution: | → fixed |
|---|---|
| Status: | assigned → closed |
Note:
See TracTickets
for help on using tickets.
Fixed at revision 19350.
These 4 packages are all xorg related. libinput now requires meson/ninja so we got those into LFS just in time. I suspect we will see more and more packages go this way.